Privacy policy
Updated
Hi Kiddo is the app for nurseries and preschools in Morocco. This policy explains what data we process, why, who it is shared with and what your rights are, under law no. 09-08 on the protection of individuals with regard to the processing of personal data.
Who we are
The hikiddo.ma website, the Hi Kiddo app and the dashboard are published by: Hi Kiddo. Contact: [email protected].
Two different roles
- For the data a nursery records (children, families, staff, the day, photos, invoices), the nursery decides how it is used: it is the data controller. Hi Kiddo hosts and processes this data on its behalf, following its instructions, and uses it for nothing else.
- For website visitors, contact requests and free-trial sign-ups, Hi Kiddo is the data controller.
The data we process
On hikiddo.ma
- Contact form: name, email, phone, nursery name, city, number of children and your message.
- Free-trial sign-up: nursery name, city, title, first name, last name, email, phone and password (stored encrypted, never readable).
- Audience measurement: pages viewed and technical information about the browser, only if you accept it (see “Cookies”).
- Server logs (IP address, date, page requested), for security.
In the app and the dashboard
- Accounts: title, name, email, phone, role, language and, if you add one, a profile photo.
- Children: name, date of birth, class, documents added by the nursery and, if the nursery records them, health information (allergies, blood type, medical notes).
- The day: arrivals and departures, meals, naps, nappy changes, activities, mood, daily reports, incidents, photos and videos.
- People authorized to pick up a child: name, relationship to the child and ID document.
- Messages between the nursery and families, calendar, menus, invoices and payments.
- Your phone’s notification identifier, to send you notifications.
Why
- To provide the service to the nursery and families: keep the child’s day, share it with the parents, exchange messages, invoice monthly fees.
- To answer your requests and manage the nursery’s free trial and subscription.
- To keep the service secure and prevent abuse.
- To measure website audience, if you accept it.
We sell no data, show no advertising in the app and use children’s data for nothing but the service provided to the nursery.
Health information
Allergies, blood type and medical notes are sensitive data. Only the nursery records them, and only the nursery team and the child’s parents can see them. They are used only to care for the child (for example, to check the weekly menu against allergies). Their processing requires prior authorization from the National Commission for the Protection of Personal Data (CNDP).
Children’s photos
Each photo belongs to one child: only that child’s parents (and the relatives they invite) see it, never other families. It is up to the nursery to get the parents’ agreement before photographing a child.
Who has access
- The nursery team, according to their role (an educator sees the children of their classes).
- Parents, only for their own children.
- The Hi Kiddo team, only for support and maintenance.
- Our technical providers, acting on our instructions: the server host (our hosting provider), Cloudflare (security and delivery of the website), Google Firebase (notifications on phones), Google Analytics (audience measurement, if you accept it) and our email provider (our email provider).
Transfers outside Morocco
Some of these providers (Cloudflare, Google) may process data outside Morocco. These transfers are made under the conditions set out in articles 43 and 44 of law no. 09-08.
How long we keep data
- A nursery’s data is kept while the nursery uses Hi Kiddo. When the subscription ends, the nursery can ask for an export of its data; it is then deleted, no later than 12 months after the end of the subscription, except invoices, kept 10 years for accounting obligations.
- An account deleted by its holder is anonymized immediately (see “Delete my account”).
- Contact requests are kept 3 years after the last exchange.
- Audience-measurement cookies are kept 13 months at most.
Security
All data travels encrypted (HTTPS). Each person has their own account; passwords are stored encrypted; a nursery sees only its own data; a deactivated account is signed out immediately.
Your rights
Under law no. 09-08, you have the right to access, correct and object to the processing of data about you.
- For a child’s or a family’s data, contact the nursery first, as it is responsible for it; you can also write to us and we will pass it on.
- For your account, you can delete it yourself in the app (Profile, then “Delete my account”) or on the Delete my account page.
- For any other request: [email protected].
You can also file a complaint with the CNDP: www.cndp.ma.
Cookies
The website uses an audience-measurement cookie (Google Analytics: _ga, ga*) only if you accept it in the banner shown on your first visit. Without your agreement, no measurement cookie is set. You can change your mind at any time with the “Cookies” link at the bottom of every page. The app and the dashboard only use the cookies needed to sign in.
Changes
We may update this policy; the date of the update is shown at the top of the page. Customer nurseries are informed of any significant change.